About the Security and Roles workspace in Planning Business Modeler

Use the Security and Roles workspace to perform security tasks for roles and users who are registered in the PerformancePoint Planning Server system. To access the Security and Roles workspace, click Security and Roles in the Workspace Browser pane.

The Security and Roles workspace includes the following pages:

Role Summary

For more information, see About the Role Summary page in PerformancePoint Planning Business Modeler Help.

Role

For more information, see About the Role page in Planning Business Modeler Help.

Users

For more information, see About the Users page in Planning Business Modeler Help.

The availability of tasks is based on the administrative role to which you belong and the current selections in the workspace. Typically, you begin a task by clicking a role or a user to select the item in the workspace. To perform most of the tasks that are available in this workspace, you must belong to the Data Administrator or Modeler role. However, to perform tasks that are directly related to users, you must belong to the User Administrator role.

Note: PerformancePoint Planning Business Modeler supports the separation of responsibilities of tasks in the Security and Roles workspace. If your organization is not structured in this manner, you can add users to more than one administrative role. Users who belong to multiple administrative roles can perform all tasks that each role allows.

In this topic

Workspace views

The Security and Roles workspace provides four different views that you can select from the View drop-down list.

Element

Description

Business Roles and Users

Lists all business roles in the model site and all users who are currently assigned to a business role. Click a role name or a user name to select the item in the workspace.

Note: Because users are listed under each role that they belong to, a single user may have multiple entries in the list of business roles and users.

Business Users Only

Lists all users who are currently assigned to a business role in the model site. Click a user name to select the user in the workspace.

Business Roles Only

Lists all business roles in the model site. Click a role name to select the role in the workspace.

Administrative Roles and Users

Lists all users who belong to administrative roles in the application, organized by role. The Data Administrator, Modeler, and User Administrator roles are divided by Application scope and Model Site scope. This is a static list of administrative role membership.

Roles and users list

Click to show the business roles in the model site, administrative roles for the application, or users who belong to roles.

Pivot by

Click User or Role to reorganize the list by users or roles. This option is enabled only when the Business Roles and Users option is selected in the View drop-down list.

Filtering boxes

Use the text boxes at the top of the table to filter the list. You can enter criteria in multiple boxes to refine the filter. The following properties appear, depending on the selection in the View drop-down list:

Name. The name of the role or user. Enter text to filter by Name entries that start with the entered text.

Label. The label for the role or user. The label is the primary identifier of objects throughout the system. Enter text to filter by Label entries that start with the entered text.

Description. The description of the role. Enter text to filter by Description entries that start with the entered text.

Used in Models. The number of models that the role can access. Enter text to filter by Used in Models entries that start with the entered text.

Users. The number of users who belong to the role. Enter text to filter by Users the entries that start with the entered text.

E-mail. The e-mail address of the user. Enter text to filter by E-mail the entries that start with the entered text.

Security and roles tasks

The availability of tasks is based on the administrative role to which you belong and the current selections in the workspace. To perform most of the tasks that are available in this workspace, you must belong to the Data Administrator or Modeler role. However, to perform tasks that are directly related to users, you must belong to the User Administrator role.

Element

Description

Create a Business Role

Click to open the Create a Role dialog box. You must belong to the Data Administrator role or Modeler role for the model site to perform this task.

Add or Remove User Administrators

Click to open the Add or Remove User Administrators dialog box for the current model site. You must belong to the User Administrator role for the model site to perform this task.

Add or Remove Data Administrators

Click to open the Add or Remove Data Administrators dialog box for the current model site. You must belong to the User Administrator role for the model site to perform this task.

Add or Remove Modelers

Click to open the Add or Remove Modelers dialog box for the current model site. You must belong to the User Administrator role for the model site to perform this task.

Add or Remove Users for This Business Role

Click to open the Add or Remove Users dialog box. This task is disabled if a business role is not currently selected. You must belong to the User Administrator role for the model site to perform this task.

Assign or Remove Business Roles for This User

Click to open the Assign or Remove Business Roles dialog box. This task is disabled if a business user is not currently selected. You must belong to the User Administrator role for the model site to perform this task.

Delete This Business Role

Click to delete the currently selected business role. This task is disabled if a business role is not currently selected. You must belong to the Data Administrator or Modeler role for the model site to perform this task.

Edit the Role Default Permissions

Click to open the Edit the Role Default Permissions dialog box. This task is disabled if a business role is not currently selected. You must belong to the Data Administrator or Modeler role for the model site to perform this task.

Role information

The Role Details pane and Related Users pane appear when you click next to the name of a business role in the list of business roles.

Role Details

This pane displays the properties of the currently selected business role.

Element

Description

Name

The name of the role.

Label

The label for the role. The label is the primary identifier of objects throughout the system.

Description

A description of the role.

Application

The application that the role is in.

Scope

The scope of the role, which is the model site that the role was created in.

Used in models

The number of models that the role can access.

Users

The number of users who are assigned to the role.

Default Access

The default permissions level for the role.

Created

The date and time when the role was created.

Created by

The administrator who created the role.

Last modified

The date and time that the role definition was last modified. This includes modifications to the name, description, and member set permissions for the role. However, changes to role membership and changes to custom user permissions are not reflected in this property.

Modified by

The administrator who last modified the role.

Related Users

This pane lists the users who belong to the currently selected role.

Element

Description

Name

The display name of the user.

Label

The domain\e-mail alias of the user. In the PerformancePoint Planning Administration Console, this is referred to as the User ID. The label is the primary identifier of objects throughout the system.